Can anyone advise me how to keep my database secure?

Because I need to be able to add data to my database through my website my ISP has set the folder containing my database (called 'data’ to have read and write privileges. However it seems to me that this now means anyone can now go to

www.mysite.com/data/mydatabase.mdb

... and download the database to their desktop. There must be a way to prevent this but I have no idea what.

Any help or advice on this would be really appreciated,

Thanks

Most of the time you can place your database outside the 'open' map that is used for normal internet use. At many hostingproviders they have a folder called 'httpdocs' to put in your website. But those providers have also directories that are not accessible through the browser because it redirects directly to the HTTPDOCS folder.

<hr><b>DMXZone support manager</b><br><a href="www.kousman.nl">Kousman web resellers</a>

Rene's method is the most secure, but for web hosts that do not support private folders, you could create a folder with an unusual name, and place the database in there - eg. www.mysite.com/r334dpoowx3q2/mydatabase.mdb

No one would normally be able to find out where that folder is because all the connection strings that point to the folder should be in your server side scripts and therefore not viewable to the general public.